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THE MAILING DATE OF THIS COMMUNICATION. 
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earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )M Responsive to communication(s) filed on 18 March 2005 . 
2a)D This action is FINAL. 2b)l3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 
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5) D Claim(s) is/are allowed. 
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8) D Claim(s) are subject to restriction and/or election requirement. 
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DETAILED ACTION 

1 . Claims 1-20 were pending in the Application at the time of the previous Office 
Action. Claims 5, 1 1, and 15 have been cancelled via the latest amendment. Therefore 
claims 1-4, 6-10, 12-14, and 16-20 are pending in the application and have been 
examined. 

Drawings 

2. The drawings were received on 1-25-2005. These drawings are acceptable. 

Allowable Subject Matter 

3. The indicated allowability of claim 5 written in independent form so as to 
incorporate its base claim and all intervening claims is withdrawn in view of the newly 
applied art found infra. Rejections based on the newly cited reference(s) follow. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 1-4, 6-10, 12-14, 16, and 17 are rejected under 35 U.S.C. 103(a) as being 
obvious in view of Malkin, "Dial-in Virtual Private Networks Using Layer 3 Tunneling", 
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IEEE, 11/1997, and Bots et al., International Application PCT/US98/12229, 12 June 
1997. 

As for claims 1 , 6, and 7, Malkin teaches a method for dynamically creating a 
tunnel in a communications network to provide subscribers host access to a network 
service (Introduction, p.555), comprising: storing a subscriber profile in a network 
database (Sec. 3. Operational Algorithm, page 556, paragraph 5), wherein the 
subscriber profile includes subscriber-specific network service tunneling requirements 
(Sec. 3. Operational Algorithm, page 556, paragraphs 4, 5: "FQDN", Fig. 2 step 5); 
receiving at a network device a first subscriber data packet associated with a first 
network service (Sec. 3. Operational Algorithm, page 556, paragraphs 4,5); accessing 
the subscriber profile to determine if the first network service has a subscriber-specific 
tunneling requirement; and creating a first tunnel if a determination is made that the 
subscriber profile requires a first network service tunnel (Sec. 3. Operational Algorithm 
page 556, fig. 4 steps 4, 5), wherein the first tunnel has a first end point at the network 
device and a second end point at the first network service (Sec. 3 Operational 
Algorithm, page 556, paragraphs 4,5). Malkin does not teach receiving at the network 
device a second subscriber data packet associated with a second network device, 
accessing the subscriber profile to determine if the second network service has a 
subscriber-specific tunneling requirement, and creating a second tunnel if a 
determination is made that the subscriber profile requires a second network service 
tunnel, wherein the second tunnel has a first end point at the network device and a 
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second endpoint at the second network service and coexists simultaneously with the 
first tunnel. However Bots does teach these features at page 11, lines 1-19, and page 
12 lines 1-20. Therefore it would have been obvious to one of ordinary skill in the art at 
the time of the invention to incorporate these features into the system of Malkin. It would 
have been desirable to do so since the ability to handle multiple subscribers with 
differing tunneling requirements would increase the utility of the system. 

As for claim 2, Malkin teaches the method of Claim 1, wherein storing a 
subscriber profile comprises storing at least one parameter chosen from the group 
consisting of the network access identifier, a user/subscriber name and a 
user/subscriber password (Sec. 3 Operational Algorithm, page 556 bottom, fig. 2 step 
5). 

As for claim 3, Malkin teaches the method of Claim 1, further comprising 
determining if a first tunnel between the network device and the first network service 
pre-exists prior to creating the tunnel between the network device and the first network 
service (Sec. 3 Operational Algorithm, page 556, paragraph 5, fig. 2 step 4). 

As for claim 4, Malkin teaches the method of Claim 1, wherein more than one 
subscriber accessing the communication network through the network device can 
simultaneously transmit data packets to the first network service via the first tunnel 
(Sec. 6.2 Maximum User Count, page 559, 2 nd paragraph). 
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Claims 9 and 10 represent the apparatus carrying out the method of claims 1-3, 
and are rejected on the same basis as those claims. 

As for claims 8 and 12, Malkin teaches a network device that dynamically creates 
a tunnel in a communications network to provide a subscriber host access to a 
destination network (Sec. 1: Introduction pages 555-556), comprising: a processor that 
receives from a subscriber a data packet associated with a network service (Sec. 3: 
Operational Algorithm, page 556, paragraphs 2-4); a database accessed by the 
processor that stores a subscriber profile that defines the tunnel requirements for the 
network service (Sec. 3: Operational Algorithm, page 556, paragraphs 2-4); and a 
tunnel management module implemented by the processor that communicates with the 
database to determine if the subscriber requires a tunnel for access to the network 
service and, if a determination is made that the tunnel is required, the tunnel 
management module creates a tunnel access session between the network device and 
the network service (Sec. 3: Operational Algorithm, page 556, paragraphs 2-4, fig. 4 
steps 4, 5 ). Malkin does not teach a tunnel management module that is capable of 
creating more than one tunnel access session for simultaneous access session for 
simultaneous subscriber access to more than one network service where more than one 
subscriber accessing the communications network through the network device can 
simultaneously transmit data packets to the first network service via the first tunnel and 
the second network service via the second tunnel. However Bots does teach these 
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features at page 11, lines 1-19, and page 12 lines 1-20. Therefore it would have been 
obvious to one of ordinary skill in the art at the time of the invention to incorporate these 
features into the system of Malkin. It would have been desirable to do so since the 
ability to handle multiple subscribers with differing tunneling requirements would 
increase the utility of the system 

As for claim 13, Malkin teaches the network device of Claim 12, further 
comprising a session management module implemented by the processor that 
communicates with the database to manage the tunnel access session provided by the 
network device (Sec. 3: Operational Algorithm, page 557, right-hand column, fig. 2, step 
8). 

As for claim 14, Malkin teaches the network device of Claim 12, wherein the 
tunnel management module determines if a tunnel between the network device and the 
network service pre-exists prior to creating the tunnel between the network device and 
the network service (Sec. 3: Operational Algorithm, page 556, paragraph 4, fig. 2, steps 
4). 

As for claim 16, Malkin teaches the network device of Claim 12, wherein the 
tunnel management module is capable of providing simultaneous access to the tunnel 
access session to more than one subscriber accessing the communication network 
through the network device (Sec. 6.2 Maximum User Count, page 559, 2 nd paragraph). 
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As for claim 17, Malkin teaches the network device of Claim 16, further 
comprising a session management module implemented by the processor that 
communicates with the database to manage the simultaneous tunnel access session 
provided to more than one subscriber accessing the communication network through 
the network device (Sec. 6.2 Maximum User Count, page 559, 2 nd paragraph). 

7. Claims 18-20 are objected to as being dependent upon a rejected base claim, 
but would be allowable if rewritten in independent form including all of the limitations of 
the base claim and any intervening claims. 

Conclusion 

8. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. The following US Patent documents disclose similar network 
tunneling protocols to the instant application: 

Federetal. 6,804,777 

9. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Paul E. Callahan whose telephone number is (703) 305- 
1336. The examiner can normally be reached on M-F from 9 to 5. 
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If attempts to reach the examiner by telephone are unsuccessful, the Examiner's 
supervisor, Andrew Caldwell, can be reached on (703) 306-3036. The fax phone 
number for the organization where this application or proceeding is assigned is: (703) 
872-9306. Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703) 305- 
3900. 
5/29/05 
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